Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a3730303a3a2f34302d3430203d3e20323037343435.roa
File:                     323630323a663962613a3730303a3a2f34302d3430203d3e20323037343435.roa (raw, json)
Hash identifier:          e9njfuW/adJjs97LVkunVduQEwm1Dj3OAW0b0EeOb08=
Subject key identifier:   CD:41:6B:D2:5C:08:C6:F8:E3:A5:46:81:BF:0E:2E:05:B7:64:59:EA
Certificate issuer:       /CN=8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a
Certificate serial:       4A2405D6C716979F9DEFA0B8D9F26B5A2E885387
Authority key identifier: 76:BF:44:7C:93:50:84:94:9D:B0:46:FF:77:38:B1:E5:7C:82:4F:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a3730303a3a2f34302d3430203d3e20323037343435.roa
Signing time:             Wed 16 Jul 2025 09:13:34 +0000
ROA not before:           Wed 16 Jul 2025 09:08:34 +0000
ROA not after:            Wed 15 Jul 2026 09:13:34 +0000
asID:                     207445
IP address blocks:        2602:f9ba:700::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/76BF447C935084949DB046FF7738B1E57C824FF9.crl
                          rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/76BF447C935084949DB046FF7738B1E57C824FF9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d37a072-15ae-4905-810e-991fc6201b45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d37a072-15ae-4905-810e-991fc6201b45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 01:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:24:05:d6:c7:16:97:9f:9d:ef:a0:b8:d9:f2:6b:5a:2e:88:53:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a
        Validity
            Not Before: Jul 16 09:08:34 2025 GMT
            Not After : Jul 15 09:13:34 2026 GMT
        Subject: CN=CD416BD25C08C6F8E3A54681BF0E2E05B76459EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:40:58:02:46:08:4d:cd:68:09:af:69:35:ca:
                    8d:ce:87:82:c9:ad:4e:ae:91:c0:39:71:de:f3:5d:
                    43:36:75:4b:9e:59:c9:0c:e8:57:63:c8:42:13:80:
                    a7:0f:7a:60:fd:e0:5b:87:61:5f:29:eb:b6:d8:a2:
                    9f:16:b8:65:a2:09:96:ad:1c:4a:e7:b5:b2:60:7c:
                    80:d4:18:56:bb:40:24:c6:f4:a5:38:1e:e3:86:b1:
                    91:12:ab:da:30:36:da:78:3b:8d:11:b7:3a:0b:e1:
                    a4:16:1d:b6:bc:a4:5b:18:71:d1:d9:ce:f3:81:b8:
                    53:1e:61:7a:12:77:c1:47:98:aa:27:13:29:a8:24:
                    0b:02:da:bb:37:9d:05:7c:de:01:0f:d5:ef:db:94:
                    31:21:67:8b:90:94:ee:26:42:35:07:2d:f2:21:a0:
                    b0:f0:9f:fa:e3:07:7a:12:67:0d:b7:31:97:bd:b2:
                    70:91:c2:5f:ec:09:df:41:95:2b:8f:ee:2f:9b:10:
                    1e:e2:69:95:48:8e:73:e7:57:c3:b7:0b:2b:df:a5:
                    c4:ae:a3:b6:4e:33:eb:06:69:54:83:57:7b:ec:8a:
                    dc:90:27:54:48:8d:aa:11:4b:ca:a3:10:ed:11:bd:
                    bb:be:9e:d6:0d:a8:6f:8e:e2:3a:bb:9c:8c:44:e1:
                    d4:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:41:6B:D2:5C:08:C6:F8:E3:A5:46:81:BF:0E:2E:05:B7:64:59:EA
            X509v3 Authority Key Identifier:
                keyid:76:BF:44:7C:93:50:84:94:9D:B0:46:FF:77:38:B1:E5:7C:82:4F:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/76BF447C935084949DB046FF7738B1E57C824FF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a3730303a3a2f34302d3430203d3e20323037343435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9ba:700::/40

    Signature Algorithm: sha256WithRSAEncryption
         c8:78:b0:d1:2d:59:c0:41:f9:4a:bd:71:95:8e:bf:da:0d:69:
         bf:aa:37:ba:26:1f:95:7d:73:b3:6d:3a:90:52:17:91:99:09:
         e2:2e:4a:23:d5:bc:24:d3:9f:b9:61:8a:8d:c3:e3:02:84:be:
         f0:3f:47:12:d2:ed:8b:10:7a:b3:de:b1:39:7b:d8:1a:72:a8:
         42:15:dd:fb:7d:21:23:a3:87:e4:99:23:05:ac:f9:d9:ba:57:
         2e:a1:c1:e1:7e:3c:0c:91:7e:8f:ca:c5:bb:1d:6f:89:f5:95:
         ff:00:34:8e:34:08:63:00:03:06:11:70:fd:3f:c7:5e:65:4a:
         8e:eb:12:b8:41:c2:71:f3:77:69:de:42:2a:3e:67:fd:76:8b:
         04:cc:5b:96:da:08:c7:58:eb:4e:e7:34:1b:8c:e4:0a:88:89:
         6f:b2:d8:c9:64:a5:85:62:ea:c2:df:72:f6:2c:b2:67:66:05:
         d0:64:81:d2:a4:2d:33:df:cd:55:9f:73:fe:a6:48:c8:f2:7e:
         c2:f2:13:80:00:38:55:9d:c4:ec:bd:63:6f:fe:40:e5:e7:5a:
         58:2b:be:01:a4:bf:63:14:c4:cb:77:c1:6d:b2:5b:63:f1:fa:
         33:23:87:fb:9a:89:01:a8:35:17:1c:50:52:f6:8c:bf:82:ce:
         a9:62:56:d2
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUSiQF1scWl5+d76C42fJrWi6IU4cwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOGQ4YTY3MmRkNzk2ZTVhZmQ5NTg3NmU5YjU2ODU2NWFl
ZjJiMGI3NmI4MzgyZWEyMmEwHhcNMjUwNzE2MDkwODM0WhcNMjYwNzE1MDkxMzM0
WjAzMTEwLwYDVQQDEyhDRDQxNkJEMjVDMDhDNkY4RTNBNTQ2ODFCRjBFMkUwNUI3
NjQ1OUVBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUBYAkYITc1o
Ca9pNcqNzoeCya1OrpHAOXHe811DNnVLnlnJDOhXY8hCE4CnD3pg/eBbh2FfKeu2
2KKfFrhlogmWrRxK57WyYHyA1BhWu0AkxvSlOB7jhrGREqvaMDbaeDuNEbc6C+Gk
Fh22vKRbGHHR2c7zgbhTHmF6EnfBR5iqJxMpqCQLAtq7N50FfN4BD9Xv25QxIWeL
kJTuJkI1By3yIaCw8J/64wd6EmcNtzGXvbJwkcJf7AnfQZUrj+4vmxAe4mmVSI5z
51fDtwsr36XErqO2TjPrBmlUg1d77IrckCdUSI2qEUvKoxDtEb27vp7WDahvjuI6
u5yMROHU6QIDAQABo4ICvDCCArgwHQYDVR0OBBYEFM1Ba9JcCMb446VGgb8OLgW3
ZFnqMB8GA1UdIwQYMBaAFHa/RHyTUISUnbBG/3c4seV8gk/5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzlhNjg5NjRmNWZmNjQwZWJhZDEwMGRlZWE3YzliYTQ2LzEv
NzZCRjQ0N0M5MzUwODQ5NDlEQjA0NkZGNzczOEIxRTU3QzgyNEZGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4
MzIxYTA3LzhkMzdhMDcyLTE1YWUtNDkwNS04MTBlLTk5MWZjNjIwMWI0NS84ZDhh
NjcyZGQ3OTZlNWFmZDk1ODc2ZTliNTY4NTY1YWVmMmIwYjc2YjgzODJlYTIyYS5j
ZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS85YTY4OTY0ZjVmZjY0MGViYWQxMDBk
ZWVhN2M5YmE0Ni8xLzMyMzYzMDMyM2E2NjM5NjI2MTNhMzczMDMwM2EzYTJmMzQz
MDJkMzQzMDIwM2QzZTIwMzIzMDM3MzQzNDM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL5ugcwDQYJ
KoZIhvcNAQELBQADggEBAMh4sNEtWcBB+Uq9cZWOv9oNab+qN7omH5V9c7NtOpBS
F5GZCeIuSiPVvCTTn7lhio3D4wKEvvA/RxLS7YsQerPesTl72BpyqEIV3ft9ISOj
h+SZIwWs+dm6Vy6hweF+PAyRfo/Kxbsdb4n1lf8ANI40CGMAAwYRcP0/x15lSo7r
ErhBwnHzd2neQio+Z/12iwTMW5baCMdY607nNBuM5AqIiW+y2MlkpYVi6sLfcvYs
smdmBdBkgdKkLTPfzVWfc/6mSMjyfsLyE4AAOFWdxOy9Y2/+QOXnWlgrvgGkv2MU
xMt3wW2yW2Px+jMjh/uaiQGoNRccUFL2jL+CzqliVtI=
-----END CERTIFICATE-----
Generated at Wed Aug 6 10:57:44 2025 by rpki-client